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LEE 



IN THE FEDERAL DISTRICT COURT 

IN THE DISTRICT OF COLUMBIA 
^ 

PAIGE, 



Plaintiff, 



V 



DO J and DEA, 



CASE NO: 
1:06CV 00644-EGS 



Defendant. : 
X 



Washington, D.C 
Thursday, January 17, 2008 



Deposition of: 



TOM GREGG 



called for oral examination by counsel for 
Plaintiff, pursuant to Notice, at the US DOJ Civil 
Division, Federal Programs, 200 Massachusetts 
Avenue, Northwest, Washington, D.C, before Mary 
E. Warner of Capital Reporting, sworn by a Notary 
Public in and for the District of Columbia, 
beginning at 8:50 a.m. 
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Q Would you state your name, please? 
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A Thomas Gregg. 
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Q How old are you, Mn Gregg? 
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A 48 years old. 
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A Yes. 
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Page 86 

just compressed, it only has 22 lines. That's the 
difference, 

Q I see. All right. Did you notice, by 
the way, Mn Gregg, when you looked at these CDs 
whether any had inlraductions involving Rock Seal 
software? 

A 1 don'l recall. 

Q All right. Hopefully I can do what I'm 
planning to do here, I've put the — what I did 
here is 1 hit "start" then 1 hit "run" and it said 
"command" and 1 clicked "okay" and I typed in E, 
colon, and then I hit "enter" then 1 typed in DIR 
and I hit "enter" and this is what pops up. And 
Vm told this is the directory for this particular 
CD. 

A This is the directory of the file 
structure, correct? Well, you're looking at the 
directory, that's all you're looking at. 

Q Yeah, the directory. 

A You're not looking at the files within 
the directory, 

Q In here — first of all does it have a 
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title in this directory? 

A It has four directories: EXT, MPE, looks 
like MPEGAV segment and then SVCD. There's four 
directories on it. 

Q Is there any sort of title file? 

A It's untitled. 

Q Is there a date and time on there? 

A Yep. 

Q And what is the date and time? 

A Aprill5,2004at2;15p,m. 

MR. PHIPPS: fm seeing a different 
number as I look at that. 

THE WITNESS: April 15, 2004, 2:15 p.m., 
right here, 2:10 p.m. 

MR. PHIPPS: I'm seeing 2:12. 
MR. MEYTHALER: I think that's what 1 
saw, too. 

THE WITNESS: 2:12, glasses don't work. 
BY MR. MEYTHALER: 

Q Does that time and date mean anything to 
you? 
A No. 



Page B8 

Q Do you know what it represents? 

A It would probably represent — it would 
appear to represent the date and time this 
directory was created on the CD, but that's no way 
of knowing with any certainty. 

Q What else could it represent? 

A Date and time stamps imply that that's 
what they are, but not knowing when this was 
bumed, how it was burned to the CD, was the 
system clock on die computer accurate? Was the 
software being used to bum the software, was that 
clock accurate? I would have no way of knowing 
that. This date and time, April 1 5, 2004 at 
2:12 p.m., is a date and time stamp associated to 
these directories. But is it a valid date and 
time stamp, I have no way of knowing that. 

Q Is that a time stamp that's put on 
automatically by the computer, or does someone 
have to type it on? 

A It can be done, that can be manipulated. 

Q Assuming there's no manipulation, what 
typically happens? 
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A It can be done by either the operating 
system — again, there's so many variables. It 
could be the type of software used to bum the — 
make the copy. That could be something in the 
software that generated this. It could have been 
something generated from the operating system, 
generate that date and time stamp. 

By operating system you mean something in 
the computer itself? 

A Correct. 

Q As opposed to someone typing in a time. 
This is a time and dale stamp, correct? 

A Well, if 3 a time and dale. When we say 
"stamp," you need to explain what you're referring 
to as a stamp. 

Q I mean, something that appears 
automatically as opposed to someone that's using 
the computer typing in that time and date. 

A There has to be a time and date 
associated with the file. So it would be odd if 
you saw the file structure and not have a date and 
time stamp. There has to be something there. 
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whether it be 2002 at 1 :00 a.m., it doesn't matter 
what it is. As long as there's something there, 
the computer doesn't care. What Vm trying to say 
1 don't know if that date and tune stamp is 
accurate. Does that truly represent April, 
whatever it was, 15th at 2:12 p.m., I don't know 
that that's an accurate representation of when 
this file was created. 

Q Let's assume for a second that it's 
accurate. We'll get back to wheUier it's 
inaccurate or not. But let's assume it's 
accurate. How would it have appeared there? 
Would it appear automatically simply by creating 
the file? 

A Yes. 

Q What would make it inaccurate? 

A Again, it could be the system clock on 
the computer that created it could have been off 
It could have been a default setting — when the 
software used to create this copy, that clock 
could be off It's hard to say. When the copy ~ 
I don't know if this is the original copy made. 
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I'm not referring to the copy you have here, but 
when this CD was created, is this a copy of a 
copy? There's a lot of variables that can change 
the date and time stamp on a file. It's really 
hard to say not knowing what software was used, 
what computer was used. 

Q I'm told by the government, this is an 
exact copy ofN-3. 

A N-3 will have that same date and time 
stamp. 

Q N-3 was provided to the DEA agent by an 
agent in Tampa by the name of Mr. Gruden who 
claims he had it copied off the original mini DV. 

A Okay. So then all I can — again, not 
knowing what software they used, I don't know — 

Q They used Rock Seal software. 

A And, again, not knowing how that software 
was configured on that specific computer during 
that time frame, I would have no way of validating 
is this an accumte date and time stamp based 
solely on this. It can't be done. 

Q Are government computers generally have 
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an accumte time and date stamp? 

MR. PHIPPS: Objection, foundation. 
THE WITNESS: Not always, no. 
BY MR. MEYTHALER: 

Q When you say "not always,'* I asked do 
they typically? 

MR. PHIPPS: Objection, foundation. 
THE WITNESS: 1 can't speak to typically. 
I know from personal experience, my computer at 
work does not have the correct date and time 
stamp. 
BY MR. MEYTHALER: 

Q How is it inaccurate? 

A It's off by 40 minutes. 

Q It's got the correct day, though? 

A Yes, correct day. But the time is off by 
40 mmutes. 

Q Can you fix that? 

A No, 1 can't fix it. 

Q How come you can't fix it? 

A It's internal to our Firebird network. I 
can't change that date and time stamp. 
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Q Does the Firebird network work off of 
the — do all of the computers in the Firebird 
network work off of the same time and date? 
MR. PHIPPS: Objection, foundation. 
THE WITNESS: They are dependent upon the 
server they're connected to. Date and time stamps 
could vary across the region. 
BY MR. MEYTHALER: 

Q If you're connected to whatever server 
you're connected to, everyone connected to that 
server would they have the same time issue? 

A Potentially. And then it could still go 
back to the computer itself could have a problem. 
It's still hard to say, would every computer have 
the same dale and time stamp? I would say that 
that would be very odd for everyone to have the 
exact same date and time. I would find that odd. 

Q Okay. All right. Thank you. Now, the 
fact that there's no title on this particular CD, 
does that mean anything to you? 

A No. 

Q How is a title placed in the directory? 
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